35985 matches found
CVE-2015-3295
markdown-it before 4.1.0 does not block data: URLs...
CVE-2015-7346
SQL injection vulnerability in ZCMS 1.1...
UBUNTU-CVE-2015-8538
dwarfleb.c in libdwarf allows attackers to cause a denial of service SIGSEGV...
CVE-2015-6959
Cross-site scripting XSS vulnerability in Vindula 1.9...
CVE-2015-8235
Directory traversal vulnerability in Spiffy before 5.4...
CVE-2015-6240
The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack...
CVE-2015-5232
Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197...
CVE-2015-8235
Directory traversal vulnerability in Spiffy before 5.4...
ALPINE-CVE-2015-8538
dwarfleb.c in libdwarf allows attackers to cause a denial of service SIGSEGV...
CVE-2015-6240
CVE-2015-6240 concerns Ansible, where the chroot, jail, and zone connection plugins allow a local attacker to escape a restricted environment via a symlink attack. Affected software is Ansible versions older than 1.9.2, as described in multiple sources (including GHSA and Debian/Ubuntu advisories...
CVE-2015-8538
CVE-2015-8538 affects libdwarf, specifically the dwarf_leb.c routine, allowing attackers to cause a denial of service (SIGSEGV). The connected sources confirm this is a DoS in libdwarf and reference multiple advisories; no concrete patch/version remediation details are provided in the supplied do...
CVE-2015-8235
The CVE-2015-8235 entry concerns a directory traversal vulnerability in the Spiffy project, affecting versions before 5.4 . The connected documents consistently describe the issue as a vulnerability in Spiffy prior to 5.4, without providing details on affected platforms, exploit vectors, or the r...
CVE-2015-8235
Directory traversal vulnerability in Spiffy before 5.4...
CVE-2015-6959
Cross-site scripting XSS vulnerability in Vindula 1.9...
CVE-2015-5202
CVE-2015-5233 describes a vulnerability in Foreman where versions before 1.8.4 and 1.9.x before 1.9.1 do not properly enforce the view_hosts permissions. This allows remote authenticated users with the view_reports permission to read reports from arbitrary hosts, or users with the destroy_reports...
CVE-2015-8235
Directory traversal vulnerability in Spiffy before 5.4...
CVE-2015-6240
The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack...
CVE-2015-6959
Vindula 1.9 is affected by a cross-site scripting (XSS) vulnerability. The CNVD entry for Vindula Cross-Site Scripting Vulnerability specifies that Vindula version 1.9 is vulnerable and that a remote attacker can exploit this to inject arbitrary web script or HTML. No further technical details (s...